Hertz is a leading vehicle rental company operating globally. They are seeking a Cloud Security Engineer to design, build, and operate cloud-native network security controls that protect enterprise workloads across various cloud environments.
Responsibilities:
- Design and implement cloud-native network security architectures across AWS and OCI, including VPC/VCN segmentation, private connectivity, and identity-aware access patterns
- Engineer and operate next-generation firewall platforms (Palo Alto, Check Point, Fortinet, Cisco) and cloud firewalls (AWS Network Firewall, OCI Network Firewall, Security Groups, NACLs)
- Develop and maintain scalable firewall and network security policies, including segmentation, micro-segmentation, NAT, VPNs, and egress/ingress controls across hybrid environments
- Automate security guardrails and firewall operations using Terraform, CloudFormation, Ansible, Python, PowerShell, Bash, or API-driven workflows
- Integrate network security controls with cloud and hybrid infrastructure, including Transit Gateway, Direct Connect, OCI FastConnect, Cloud WAN, load balancers, DNS, and service-to-service communication patterns
- Support secure connectivity for distributed on-prem devices and mobile endpoints, including VPN clients, mobile access gateways, ZTNA/SASE integrations, and secure remote access for laptops, tablets, and smartphones
- Monitor and enhance network security posture using cloud-native logging, monitoring, and detection tools (CloudWatch, OCI Logging/Monitoring, Panorama, FortiManager, SIEM platforms)
- Participate in incident response for cloud and network security events, including triage, containment, and root cause analysis
- Collaborate with cloud, platform, and application teams to embed secure-by-default patterns into architectures and CI/CD workflows
- Contribute to resilience and disaster recovery strategies for network and firewall infrastructure
Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, IT, or related field
- Background supporting large-scale, regulated, or globally distributed environments
- Strong understanding of cloud networking and security across AWS and OCI
- Hands-on experience with next-generation firewalls (Palo Alto, Fortinet, Check Point, Cisco)
- Deep knowledge of network and security protocols (TCP/IP, DNS, DHCP, IPSec, SSL/TLS, routing)
- Experience with cloud-native monitoring and logging (CloudWatch, OCI Observability, Panorama, FortiManager, SIEM)
- Solid understanding of Zero Trust, segmentation, and least-privilege access models
- Experience supporting distributed on-prem devices and mobile connectivity, including VPN clients, ZTNA/SASE, and secure remote access
- Familiarity with compliance frameworks (PCI DSS, SOX, ISO 27001, NIST 800-53/CSF, HIPAA)
- Strong analytical and troubleshooting skills across hybrid cloud and on-prem environments
- Excellent communication and collaboration skills
- Ability to collaborate with internal and external stakeholders across multiple functions and locations
- Flexible and adaptable; ability to work effectively in ambiguous situations
- Excellent verbal and written communication skills
- Results driven, ability to make decisions and help solve problems
- Ability to work under minimal supervision with a goal-oriented mindset
- Ability to see the big picture and leverage critical thinking and decision-making skills
- Excellent organization, time management and prioritization skills
- Certifications such as PCNSE, Fortinet NSE 4/5/7, CCNP/CCIE Security, AWS Security Specialty, OCI Security Professional
- Experience with DevSecOps practices, CI/CD-driven security automation, or platform engineering
- Proficiency with infrastructure-as-code and automation (Terraform preferred; CloudFormation, Ansible, Python, PowerShell, Bash)